CVEvulnerability

CVE-2003-0042

5.0 MEDIUM Published 2003-02-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-02-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.

Affected configurations

• apache tomcat 3.0 • apache tomcat 3.1 • apache tomcat 3.1.1 • apache tomcat 3.2 • apache tomcat 3.2.1 • apache tomcat 3.2.3 • apache tomcat 3.2.4 • apache tomcat 3.3 • apache tomcat 3.3.1

References